COURSE of the MONTH

My Windows 2000 professional pc cannot map a network drive or see any network shares after a computer (machine) certificate is installed locally from my windows 2003 enterprise CA

Hello all, i want to ask the following question, My Windows 2000 professional pc cannot map a network drive or see any network shares after a computer (machine) certificate is installed locally from my windows 2003 enterprise CA. Although i have pc's with both xp and 2000 pro in the domain one win2000 pc cannot map network drives or see any network shares. Another pc with win2000 works fine!. the only problem is with that one. All the pc's have winXP and Win2000 pro with the latest service packs and updates. My CA is Win2003 Enterprise server R2 SP2 updated. everything is 32bit. If any further clarifications are needed i would be happy to give them to you.

Depending on your version of IE you may or may not be able to do this, but...
internet options - content tab - Clear SSL State button. Sometimes standard browser stuff like clearing temp internet files, history, etc. helps too, but the SSL state is a higher chance when dealing with cert issues.

Also try opening up the cert and looking for the CRL Distribution Points on the Details tab and make sure you can pull at least one of those up in a browser.

Also check the trusted root certificate store and make sure the root cert made it in.

Assuming you are running corporate paid version not free home user version here? There is a software firewall - maybe you have multiple software firewalls running (e.g. windows firewall) that may be causing conflicts, or maybe a 'stop all traffic' button. Its been a little while since i ran AVG myself, so I'm working off a few generalities of the AV industry here.

See if you can enable some logs for the dropped packets / conflicts and go from there. If it does application level security, see if you can look at the blocked apps and allow them - crypto stuff is usually pretty obvious by name, but google it if you're not sure or post here.

Also, it may be that you have something that came out before a definition update that may be getting in the way and acting that way on purpose. Getting an offline / bootup cd virus scan performed might be something to do if you have the feeling a virus might be in the way. Right now I wouldn't jump to hard in that direction.